[Samba] Non Samba question

Fri Aug 23 11:13:32 UTC 2019

Preciously the answer I have been digging for. I knew you'd have had the
experience that was similar to mine, THANKS!!

I'll digest this over the weekend and post back soon.

Again, thanks!

On Fri, Aug 23, 2019 at 3:05 AM L.P.H. van Belle <belle at bazuin.nl> wrote:

> Hai Bob,
>
> > I hope you remember me from a few years ago. And I apologize for the
> direct message.
> > I have a almost non-Samba question, I think. So, I do not want to post
> it to the forum, yet.
> Yes yes, i remember you :-) , and i have no problem with direct messages.
> How are you doing?
>
> I'll reply to the list with a CC for you. Because this involves samba
> also.
> And this might help others also.
>
> Slugghish windows 10? There are may ways to fix a "sluggish" windows.
> One example:
> - With (almost) every click you do in windows a dns request is involved
> and internet is accessed.
>
> This is also why i hammer on a correct resolving setup, this helps in
> speeding up you windows.
>
> So here it starts DNS/Resolving.
>
> Example : Windows cannot access \\server check the spelling of the name
> 0x800704cf
> That involves all links below.
>
> Read:
> https://tools.ietf.org/html/rfc2606
> https://tools.ietf.org/html/rfc6761
> https://en.wikipedia.org/wiki/.local
> https://tools.ietf.org/html/rfc6762
>
> Other good articals with examples, ( must read )
>
> https://social.technet.microsoft.com/wiki/contents/articles/34981.active-directory-best-practices-for-internal-domain-and-network-names.aspx
>
> And a security consideration:
> https://www.us-cert.gov/ncas/alerts/TA16-144A  (Leaking DNS info)
>
> This is a must read :
>
> https://support.microsoft.com/en-us/help/909264/naming-conventions-in-active-directory-for-computers-domains-sites-and
>
>
> And looking at table 6.2 here:
>
> https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/cc959336(v=technet.10)
>
> Your resolving should match this : ( at least for an AD-DC/LAN network )
> - hostname , min 1, max 15 characters, a-Z,0-9, -
> - DNS domain name, max total FQDN 254 characters, include the dot's.
>     And 254-15, results in 239 characters left for the domain.tld part.
>     The FQDN for an Active Directory domain name is limited to 64 bytes.
>
> When this is perfect, you will notice and increase of speed in you windows
> 10.
>
> (BOB)>  I always felt like, but could be wrong, that with one of the
> previous W10 upgrades, windows changed something and my file explorer was
> suddenly slower.
> Yes, you are correct, more and more is going to internet, unless you
> disable/block it.
>
> Themes, set the most simple, plain themes, what you set at home is up2you,
>         but for businesses, keep is as simple as it is possible.
> In GPO : 'User Configuration > Administrative Templates > Start Menu and
> Taskbar > Notification', Turn off tile notifications
>
> Make you windows less fancy but much faster.
> - Disable Effects & Animations
> - Set visual effect to Best performance.
> - Disable Transparency Effects
> - remove/disable Cloud Sync.
> - Disable "Fast startup", yes, you pc might start a bit faster,
>  but it will give you some nice problems back in the end, due to power
> saving/hibernation/Sleep states.
>  A reboot is not reboot anymore, it unloading/loading windows ( not
> powercycle) !
>  Disable it to be able to reboot your pc normaly.
>  Laptop/notebook might suffer from these problems and even worse, some
> have these settings enable in the bios
>  And windows will pick up these settings.
> - Computer Configuration > Administrative Templates > Windows Components >
> Search. Disable Cortana
> - Unpin Quick-Access, just disable it or remove the "Work ...." parts.
>   Or set the Quick-access to "Open File explorer to "this PC"
>
> - Windows 10 frequently performs optimization in the background and that
> can cause File Explorer to be slow.
>   Fix it with :
> Right-click the folder that’s slowing down File Explorer. Choose
> Properties from the menu.
> Go to the Customize tab.
> Set Optimize this folder for to General items. If this value is already
> set, select any other value from the list. After that, switch it back to
> General items.
> Check Also apply this template to all subfolders.
> Click Apply and OK to save changes
>
> - the index might be corrupt, fix it by rebuidling the index.
> Press Windows Key + S and enter indexing options. Choose Indexing Options
> from the menu.
> Advanced : Now click on Rebuild button.  ( optional change index
> locations. )
>
> - Clean up windows and check up windows. CMD with Adminitrator rights.
> DISM /Online /Cleanup-Image /CheckHealth
> DISM /Online /Cleanup-Image /ScanHealth
> DISM /Online /Cleanup-Image /RestoreHealth
>
> - Clean up your windows with "Disk cleanup" first as user, then as
> Administrator, then select all you can.
> Tip, do this before all major updates of window 10, this helps preventing
> windows 10 upgrade. (like 1803 to 1903 upgrades)
> It will easily save you 10-20GB on your pc.
>
> In a LAN, enable, Wait for Network in the GPO.
>
> https://www.spinics.net/lists/samba/msg159233.html
> Shows the suggested services to enable (slowed down at start up)
> ! NOTE, I personaly, have not changed these settings, because its not
> needed here.
> GPO and correct DNS does it all for me.
>
>
> -  Use netsh winsock reset command
>
> -  Disable the TDM service if you dont use it.
>
> A "small" part of my arsenal in batteling windows.
> Yes, i have more, but above helps in 99% of the cases.
>
>
> Greetz,
>
> Louis
>
> ________________________________
>
>         Van: Robert Wooden [mailto:bob at donelsontrophy.com]
>         Verzonden: donderdag 22 augustus 2019 17:38
>         Aan: L.P.H. van Belle
>         Onderwerp: Non Samba question
>
>
> I hope you remember me from a few years ago. And I apologize for the
> direct message.
> I have a almost non-Samba question, I think. So, I do not want to post it
> to the forum, yet.
>
>         In this post on the Samba forum,"[Samba] Windows cannot access
> \\server check the spelling of the name 0x800704cf" you mention checking
> some Windows settings and creating a GPO for them.
> I just had a quick look at the thread. A long threath...
>
>         I first checked your suggested settings on one workstation and
> these services were not enabled. Then I created a GPO to push these
> settings to all workstations. Forced the GP update and check services again
> and all were enabled.
>
>
>         Prior to changing the settings (you suggested), for the longest
> time I had "sluggish" file explorer issues and changing these settings
> greatly improved the sluggishness.
>  I always felt like, but could be wrong, that with one of the previous W10
> upgrades, windows changed something and my file explorer was suddenly
> slower.
> Yes, correct, with so many things in windows getting things from the
> internet/ms servers, its making you pc slow.
>
>
>         When these changes were made other domain services improved.
> Occasionally my 'profiles" would not load at workstation start up. Now with
> improved network setting (you suggested) I have not experienced these
> failed profiles issues, as yet.
>
>
>                 Have you ever had an experience similar to mine (sluggish
> file explorer) or a similar complaint from a customer like this? Where
> there any other GPO you created or know of that might help the connections
> between W10 and my domain members?
>
>
>         I attempted a question similar to this on the forum but got one
> answer which actually was a non-answer from some guy who does not use GPO.
>         forum? Samba forum?
>
>
>         This turned into a longer email than I expected, sorry.
>
>
>         --
>
>                 Thank you.
>
>                 Bob Wooden
>
>
>

-- 
Thank you.

Bob Wooden